Privacy notice
Last updated 31 August 2026. This notice explains how Dataface processes personal data — both about the people who appear in the public records it presents, and about the people who use it. Plain English by design; it is the notice required by UK GDPR Articles 13 and 14.
Who we are
Dataface Ltd (explore.dataface.uk), 6th Floor, Gordon Chambers, 90 Mitchell Street, Glasgow, United Kingdom, is the controller of the processing described here and is registered with the Information Commissioner’s Office. Contact for anything in this notice, including objections and corrections queries: access@dataface.uk.
Why you might appear here
If you are or have been a UK company director, secretary, person with significant control, or an FCA-registered individual, the official public registers publish records about you — and Dataface presents those records to a closed professional audience. Dataface holds no information about you beyond what the official sources have published. Nothing here is an allegation: the site states dated facts from the public record, with links back to the source, for a reader to verify and judge.
What we process, and where it comes from
Categories: public-register company, insolvency and financial-services-register records — officer appointments and resignations, registered addresses (service addresses as filed), people-with-significant-control records, Gazette insolvency notices (corporate and personal), Companies House insolvency case records, and FCA register entries including prohibition records. Sources, named: Companies House, The Gazette (the official public record), and the FCA Financial Services Register. We keep a regularly refreshed local index of parts of these public records so retrieval is fast — the registers remain the systems of record.
Why, and on what legal basis
Purpose: enabling authorised financial-services professionals — a closed group of UK life & protection providers and the FCA — to carry out counterparty due diligence and ongoing monitoring of the firms they work with, duties their regulator expects of them. Legal basis: legitimate interests (UK GDPR Article 6(1)(f)) — the users’ regulatory monitoring obligations and our interest in operating the service. For any data revealing possible regulatory or insolvency events about individuals, we apply safeguards: exact-match anchoring, “possible — verify” labelling, timing guards, and links to the official source. Linked insolvencies are anchored to Companies House’s own officer record. Because Companies House sometimes files one person under several records, we also show possible other records that share a director’s surname, forenames and birth month and year — labelled “not confirmed as the same person”, opened automatically only where the name is rare on the register, never merged into the person’s record, and never counted in any finding. No automated decisions are made about anyone, and no risk score is computed about any person; a co-appearance strength is used only to order investigation leads, never as an assessment of anyone.
Who sees it
Access to the analytical views is restricted to verified users at approved organisations — UK life & protection providers and the FCA — for adviser-firm risk monitoring. The service is not open to the public beyond basic register look-ups.
How long
Current-state facts refresh from the source; corrections made at a register flow through on the next refresh. Personal-insolvency records are aged off display after 6 years, in line with credit-industry practice, even though the official record remains published. Users’ sign-in and page-view records are kept up to 12 months; security logs of public-page visits up to 90 days.
Your rights
You have the right to access the personal data we hold about you; to rectification — corrections happen at the register that publishes the record, and we reflect the source, but if Dataface shows something the source does not say, tell us and we will check and fix it; to object (Article 21) — write to access@dataface.uk and we will assess your objection individually and respond with reasons; and to erasure where it applies. You can complain to the Information Commissioner’s Office (ico.org.uk) at any time.
Users of the service
For signed-in users we process: your work email address (your account), sign-in records, and the pages you view (kept up to 12 months, disclosed in the terms). Magic-link sign-in emails are sent via Amazon SES. We set only the cookies needed to keep you signed in.